$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json) Hash identifier: N7l7aWPqdgGDkuTRW+wSzo99p1ML1Viv9dlq6WuWu9U= Subject key identifier: D7:39:3D:B9:0F:06:DA:EE:AE:D2:BF:BF:96:7A:6A:64:F7:B1:00:01 Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 6DD30D5728BD25F35B4BC756D547781A30505BC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft Manifest number: 04B8 Signing time: Wed 19 Feb 2025 10:11:04 +0000 Manifest this update: Wed 19 Feb 2025 10:06:04 +0000 Manifest next update: Sat 22 Feb 2025 17:17:04 +0000 Files and hashes: 1: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=) 2: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=) 3: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: 2/x4Qw/F/zsfsvc9JOJlY2G2LhkflQn7lD5v28Bqntk=) 4: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: 3p/hk5MLyUzRcTjxx6VZclvMzV7vaFx0cjt9/zXwI+E=) 5: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: H5UbeEY/iKVWeyVEanGtaf2L0y0JUm9EF64WOl/HBQQ=) 6: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: 9AGdEE7Ypm9N4iPkKoAt//Ra6W/LAAKMrLdCw+PEGow=) 7: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: m0CFS0bXXlC2sSkkYuX1uK7YpHcSKbwTasnOg//5UpE=) 8: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: hm/9X3cuyk8jd/AB2iBbcuodpHF2xW4uztYBSuY3yNU=) 9: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=) 10: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: Sy6BflqYLR0sZsbRWtHtSQOlWDRu7he2nETil7/zL5w=) 11: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: CTD8Xvgjr9YDqDwDOqgLumiXOGwu1HyyyOVZc6JRmTw=) 12: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: iv0At4Oeueo57x1vdPZ8SVWvO7rIBV/xKbQmx2X640g=) 13: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=) 14: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: qPhFyLO5p2XLEIOO0toGgTiGmQ5k4sJq0J9ZvFILUNg=) 15: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: mkruWkyUTX+c2Tw+0w7WwT3w2s3+OGAbVUZStH/a/n8=) 16: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: qw0lOUkhaAxZB0W6Uovf+8Fl+4ITR1IdmbPGHHrVmrg=) 17: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: 7qHsw3w27NVdqWTWhdv7nrW74KPBDCmwGCBiiRBioWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 17:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d3:0d:57:28:bd:25:f3:5b:4b:c7:56:d5:47:78:1a:30:50:5b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Feb 19 10:06:04 2025 GMT Not After : Feb 22 17:17:04 2025 GMT Subject: CN=D7393DB90F06DAEEAED2BFBF967A6A64F7B10001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:a0:53:f8:60:3f:cb:25:de:fc:85:0a:37: 1c:02:89:f5:22:09:fc:92:16:8f:38:4f:87:0e:b0: b7:e2:91:bf:de:97:2d:1e:02:25:02:e0:ed:57:5c: 8e:f4:08:2a:47:88:2e:23:f0:eb:06:85:91:19:26: 82:07:a2:bf:a5:b9:03:12:73:22:85:88:d0:58:9a: ce:2c:e2:7b:e6:3d:ac:36:9b:ab:40:a4:c9:8e:91: 61:49:ed:99:de:2d:2d:6b:d1:ca:dc:f9:60:d3:fc: a4:2a:ea:16:7e:99:f4:3c:48:8a:91:0d:c4:f5:4f: dc:86:4d:a3:d5:e4:82:0b:30:c4:43:9b:0f:83:38: 5c:6f:4c:5b:2f:ce:ad:f2:26:83:ef:b4:b7:a3:22: 9a:ac:f7:88:d7:3b:bc:77:b0:05:bb:2b:40:1b:06: 75:9e:d3:cf:4f:aa:ea:85:90:41:13:61:0a:aa:3d: f2:5b:00:6a:59:ea:15:eb:2b:8f:14:d4:91:ef:27: 14:20:71:78:57:5a:7b:53:9e:59:15:9e:d4:e9:68: d8:ab:4a:21:fd:c5:c0:66:5e:38:82:be:a0:fb:72: 24:b4:f9:ad:fa:c2:75:c2:06:98:9e:35:5d:4a:c4: 2c:f3:5b:36:bc:17:70:0f:73:ec:82:29:2a:2d:32: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:39:3D:B9:0F:06:DA:EE:AE:D2:BF:BF:96:7A:6A:64:F7:B1:00:01 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:95:87:2a:89:d2:0c:ff:4a:11:8d:5c:b7:f6:d1:4e:b5:5e: f2:77:c2:ec:1f:fd:35:9b:44:13:3f:c6:66:f0:df:e0:5b:00: 35:61:75:a5:f6:83:68:85:27:a6:d4:85:af:09:43:1e:e9:8b: d4:16:5d:69:97:8c:2e:55:00:c2:58:dd:93:5c:46:db:56:aa: 41:c5:4a:49:c5:49:5b:2d:96:2b:38:a8:e4:50:f9:a0:22:1f: 7f:24:29:e7:dc:ca:9b:4e:be:98:c0:b8:3e:2d:51:c5:ec:8c: fb:2c:98:09:c3:c9:58:1e:93:3e:9a:0c:9b:06:ac:d0:80:f1: 27:39:f9:ed:11:98:bb:de:6a:00:5e:7a:bb:b1:02:32:3f:2e: ab:67:84:95:a5:ec:de:83:c7:36:75:a6:2c:de:f7:ac:29:86: e9:74:f9:8d:c7:ca:36:4f:a7:36:56:02:82:51:80:f8:51:b6: 35:5e:f3:36:16:5a:d3:62:0f:32:c9:59:e8:03:73:fa:12:78: a5:e4:10:57:dd:31:59:27:6a:22:90:e1:74:54:c7:7c:1d:d1: 16:11:fc:2b:14:8b:10:94:a7:a7:ef:cc:ee:04:93:8b:5d:46: 76:77:40:0c:4a:0c:36:5e:8f:0c:05:19:1c:0b:83:0f:ff:70: f1:0d:3a:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdMNVyi9JfNbS8dW1Ud4GjBQW8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTAyMTkxMDA2MDRaFw0yNTAyMjIxNzE3MDRaMDMxMTAvBgNV BAMTKEQ3MzkzREI5MEYwNkRBRUVBRUQyQkZCRjk2N0E2QTY0RjdCMTAwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXqBT+GA/yyXe/IUKNxwCifUi CfySFo84T4cOsLfikb/ely0eAiUC4O1XXI70CCpHiC4j8OsGhZEZJoIHor+luQMS cyKFiNBYms4s4nvmPaw2m6tApMmOkWFJ7ZneLS1r0crc+WDT/KQq6hZ+mfQ8SIqR DcT1T9yGTaPV5IILMMRDmw+DOFxvTFsvzq3yJoPvtLejIpqs94jXO7x3sAW7K0Ab BnWe089PquqFkEETYQqqPfJbAGpZ6hXrK48U1JHvJxQgcXhXWntTnlkVntTpaNir SiH9xcBmXjiCvqD7ciS0+a36wnXCBpieNV1KxCzzWza8F3APc+yCKSotMvPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1zk9uQ8G2u6u0r+/lnpqZPexAAEwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0 MzU4NDkwM0UxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmVhyqJ0gz/ShGNXLf20U61XvJ3wuwf/TWb RBM/xmbw3+BbADVhdaX2g2iFJ6bUha8JQx7pi9QWXWmXjC5VAMJY3ZNcRttWqkHF SknFSVstlis4qORQ+aAiH38kKefcyptOvpjAuD4tUcXsjPssmAnDyVgekz6aDJsG rNCA8Sc5+e0RmLveagBeeruxAjI/LqtnhJWl7N6DxzZ1pize96wphul0+Y3HyjZP pzZWAoJRgPhRtjVe8zYWWtNiDzLJWegDc/oSeKXkEFfdMVknaiKQ4XRUx3wd0RYR /CsUixCUp6fvzO4Ek4tdRnZ3QAxKDDZejwwFGRwLgw//cPENOtk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:12:49 2025 by rpki-client